Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/_NB8dtkURWlVI-juyNbqoV0rHes.roa
File: _NB8dtkURWlVI-juyNbqoV0rHes.roa (raw, json)
Hash identifier: 6QXeEGt/OzicLqIqUdo3adTcXSxtmizDbLavyKV/gVA=
Subject key identifier: FC:D0:7C:76:D9:14:45:69:55:23:E8:EE:C8:D6:EA:A1:5D:2B:1D:EB
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01916B32E1A2F79E82646B298BE7DB84DD8A
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/_NB8dtkURWlVI-juyNbqoV0rHes.roa
Signing time: Mon 19 Aug 2024 15:13:02 +0000
ROA not before: Mon 19 Aug 2024 15:13:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201584
IP address blocks: 185.210.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:32:e1:a2:f7:9e:82:64:6b:29:8b:e7:db:84:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Aug 19 15:13:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd07c76d91445695523e8eec8d6eaa15d2b1deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:28:a2:6e:19:be:36:a8:9c:af:a5:68:18:
42:64:37:c9:12:a5:a7:7b:6c:ec:a4:22:68:65:52:
3b:11:f9:bc:57:fa:e8:9b:9b:2d:1b:4e:68:6a:cd:
14:b8:13:c1:3b:50:6b:db:eb:e6:54:a3:84:df:35:
05:f1:08:b6:11:b7:ca:f5:de:e6:2d:2c:32:49:8a:
9c:0b:16:cc:72:7f:19:5f:8d:db:9a:ac:c5:84:a5:
f9:35:18:b0:61:18:e0:13:cd:5a:f4:a9:5c:dc:fe:
1b:66:30:c9:5d:c7:53:d7:89:f8:ab:f4:2a:08:9c:
7e:f4:ff:ba:da:7d:84:85:3a:b0:b9:b7:56:90:d8:
dc:84:c7:d2:09:a7:28:8b:4a:6d:7b:9b:b8:16:24:
ec:86:52:76:6d:64:87:de:20:9d:a5:34:cd:2b:b7:
0f:97:ce:c6:de:b4:d2:91:a6:e9:f4:64:4d:e3:43:
98:3a:66:37:0e:08:13:63:d6:a3:75:6d:47:35:ea:
30:6a:d1:e2:b0:46:1e:fc:42:2d:0b:63:af:13:ec:
96:14:65:8a:39:5f:74:dd:15:f3:f7:29:0d:d6:01:
ca:ae:0a:c3:63:4e:7d:26:f4:d0:7e:f2:38:7f:78:
e5:dc:62:40:a7:9e:81:69:29:c0:80:d6:16:b6:06:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:7C:76:D9:14:45:69:55:23:E8:EE:C8:D6:EA:A1:5D:2B:1D:EB
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/_NB8dtkURWlVI-juyNbqoV0rHes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ff:d7:81:b3:1d:29:a3:b6:ee:ed:48:5a:dc:03:6d:db:c5:
1d:a0:5c:6c:e8:3b:82:d4:f3:8e:47:b1:65:f9:9a:54:92:95:
e3:d3:66:c4:4c:76:bf:4b:cd:55:93:07:7e:dc:91:76:f4:92:
f7:d5:ff:d0:50:69:51:56:36:ee:d9:34:4f:98:f6:21:77:1b:
10:8f:8e:d4:dd:08:1c:f5:50:36:58:00:14:15:52:09:7c:23:
b7:05:70:5e:40:f1:1c:51:02:ae:81:df:5d:be:1e:8a:7f:1e:
dc:cb:f2:cd:e1:e1:53:b8:14:c8:d3:27:fe:72:fb:ce:d5:5d:
38:50:b7:72:01:63:db:e8:6e:20:91:fa:f9:68:5e:e4:f5:68:
6b:43:ec:2a:9c:d9:fd:30:29:ed:31:ff:89:f0:ce:5a:d3:e7:
58:17:5f:35:25:33:c9:2e:77:d9:ce:e0:bc:73:10:2d:6c:00:
42:bb:21:f1:e6:af:11:95:a6:51:4d:c0:f1:38:4c:8b:0d:bf:
2d:5b:5b:dc:5b:e9:fc:34:be:19:1d:3d:a2:11:1d:2d:61:4c:
68:65:a0:86:09:bc:6e:e2:58:11:f3:19:ae:7a:45:e7:70:7d:
d0:59:5e:2a:12:27:79:86:99:e3:c2:1f:73:c4:e2:25:24:29:
15:b1:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:28:17 2024 by rpki-client on console-fra.rpki-client.org